After the Internal-to-Internet Source NAT rule is configured and committed, which test does the lab expect to succeed from condorID-W1?

### Why this is right The lab asks the student to test Internet access from condorID-W1 by opening a browser or pinging google.ca after Source NAT is configured. It expects the test to work. ### The concept An outbound Internet test checks the full path: the security policy must permit the traffic, and the NAT rule must translate its source address as configured. The test does not prove that an Internet host can initiate a connection into Internal; that is a different traffic direction and permission. ### The other options - **B. Initiate a new connection from the Internet to an Internal host**: this is not the outbound test and is not granted by the Source NAT rule. - **C. Reach the DMZ web server using an inbound public web address**: that is tested using Destination NAT in the later task. - **D. Change the firewall's zone assignments**: the lab's Internet test does not alter zone definitions. ### Terms - **Internet access**: Communication from a lab host to an Internet destination through the firewall. ### Remember Test the traffic direction that the NAT rule was built to support.